v1.22.0-pre1: Yda Hext

[Xe]

Full release notes will be written later. This prerelease is meant to help test the new features. Read the changelog for a comprehensive list of changes. It's a lot.

Please file bugs if you encounter issues.

What's Changed

• build(deps): bump on-headers and compression in /docs by @dependabot[bot] in build(deps): bump on-headers and compression in /docs #910
• chore: expose thoth in lib by @Xe in chore: expose thoth in lib #911
• test(lib): add a test for the X-Forwarded-For middleware by @Xe in test(lib): add a test for the X-Forwarded-For middleware #912
• build(deps): bump brace-expansion from 1.1.11 to 1.1.12 in /docs by @dependabot[bot] in build(deps): bump brace-expansion from 1.1.11 to 1.1.12 in /docs #909
• test: add automated Pale Moon tests by @Xe in test: add automated Pale Moon tests #903
• feat(expressions): add segments function to break path into segments by @Xe in feat(expressions): add segments function to break path into segments #916
• feat(default-rules): add weight to Custom-AsyncHttpClient by @Xe in feat(default-rules): add weight to Custom-AsyncHttpClient #914
• build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in build(deps): bump the github-actions group with 2 updates #929
• fix(anubis): store the challenge method in the store by @Xe in fix(anubis): store the challenge method in the store #924
• build(deps): bump the gomod group in build(deps): bump the gomod group #931
• Update is.json by @sveinki in Update is.json #935
• fix: polish Turkish translations by @bitigchi in fix: polish Turkish translations #897
• fix(lib): add the ability to set a custom slog Logger by @Xe in fix(lib): add the ability to set a custom slog Logger #915
• fix: allow social preview images by @Xe in fix: allow social preview images #934
• refactor(web): redo proof of work web worker logic by @Xe in refactor(web): redo proof of work web worker logic #941
• Add HackLab.TO to known instances by @lillian-b in Add HackLab.TO to known instances #936
• fix(web/sha256-browserjs): fix function name by @Xe in fix(web/sha256-browserjs): fix function name #943
• Add swedish local by @axellse in Add swedish local #913
• docs: remove JSON examples from policy file docs by @Xe in docs: remove JSON examples from policy file docs #945
• fix(internal): silence unsolicited response log lines by @Xe in fix(internal): silence unsolicited response log lines #950
• fix(web): embed challenge ID in pass-challenge invocations by @Xe in fix(web): embed challenge ID in pass-challenge invocations #944
• build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in build(deps): bump the github-actions group with 2 updates #952
• Revert "build(deps): bump the github-actions group with 2 updates" by @JasonLovesDoggo in Revert "build(deps): bump the github-actions group with 2 updates" #962
• Fix capitalisation in bokmål and nynorsk translations by @turtlegarden in Fix capitalisation in bokmål and nynorsk translations #959
• Added Dutch translation by @SecularSteve in Added Dutch translation #937
• fix(localization): Improve Czech language translation by @Medvidek77 in fix(localization): Improve Czech language translation #895
• feat(checker): allow png/gif/jpg/jpeg/svg favicons as well as ico by @arcayr in feat(checker): allow png/gif/jpg/jpeg/svg favicons as well as ico #961
• default pattern fixes by @arcayr in default pattern fixes #963
• feat: support HTTP redirect for forward authentication middleware in Traefik by @phoval in feat: support HTTP redirect for forward authentication middleware in Traefik #368
• Update known-instances.md: add lab.civicrm.org by @mlutfy in Update known-instances.md: add lab.civicrm.org #971
• feat(lib): Add optional restrictions for JWT based on a specific header value by @Earl0fPudding in feat(lib): Add optional restrictions for JWT based on a specific header value #697
• add Lithuanian locale by @rimas-kudelis in add Lithuanian locale #972
• fix(locales): remove the word "hack" from the description of Anubis by @Xe in fix(locales): remove the word "hack" from the description of Anubis #973
• feat(web): Add option for customizable explanation text by @Earl0fPudding in feat(web): Add option for customizable explanation text #747
• Bump ai.robots.txt to v1.39 by @Dryusdan in Bump ai.robots.txt to v1.39 #982
• feat(blog): add short funding update post by @Xe in feat(blog): add short funding update post #994
• fix(lib): ensure issued challenges don't get double-spent by @Xe in fix(lib): ensure issued challenges don't get double-spent #1003
• fix(default-config): block Huawei Cloud by @Xe in fix(default-config): block Huawei Cloud #1004
• fix(default-config): also block alibaba cloud by @Xe in fix(default-config): also block alibaba cloud #1005
• Update installation.mdx to include a link to the Caddy docs by @juliankrieger in Update installation.mdx to include a link to the Caddy docs #993

New Contributors

• @bitigchi made their first contribution in fix: polish Turkish translations #897
• @lillian-b made their first contribution in Add HackLab.TO to known instances #936
• @axellse made their first contribution in Add swedish local #913
• @SecularSteve made their first contribution in Added Dutch translation #937
• @Medvidek77 made their first contribution in fix(localization): Improve Czech language translation #895
• @arcayr made their first contribution in feat(checker): allow png/gif/jpg/jpeg/svg favicons as well as ico #961
• @phoval made their first contribution in feat: support HTTP redirect for forward authentication middleware in Traefik #368
• @mlutfy made their first contribution in Update known-instances.md: add lab.civicrm.org #971
• @rimas-kudelis made their first contribution in add Lithuanian locale #972
• @juliankrieger made their first contribution in Update installation.mdx to include a link to the Caddy docs #993

Full Changelog: v1.21.3...v1.22.0-pre1

---

This discussion was created from the release v1.22.0-pre1: Yda Hext.

[rimas-kudelis]

@Xe, #972 was a flop, because my branch was overwritten by a bot before it was merged into your main branch, and all my contribution was lost. Please merge #998 instead and edit the notes to mention that PR instead. Thanks!

[lolgzs]

Hi,

it seems that upgrading from 1.21.3 to 1.22.0-pre1 causes browsers with 1.21.3 cookie to not pass Anubis. Delete cookie -> ok. 1.22.0-pre1 cookie back to 1.21.3 -> fail.

I cannot reproduce it always (??) but lot of our users have the problem.

Is there a way to force re-creation / update / clear of cookie ?

[lolgzs]

workaround : change cookie-prefix